USN-1835-1: Linux kernel vulnerabilities
A buffer overflow vulnerability was discovered in the Broadcom tg3 ethernet driver for the Linux kernel. A local user could exploit this flaw to cause a denial of service (crash the system) or potentially escalate privileges on the system. (CVE-2013-1929) A flaw was discovered in the Linux kernel's ftrace subsystem interface. A local user could exploit this flaw to cause a denial of service (system crash). (CVE-2013-3301)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-3.5.0-31-genericto a version that resolves this vulnerability.Fixed in 3.5.0-31.52 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-31-powerpc-smpto a version that resolves this vulnerability.Fixed in 3.5.0-31.52 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-31-highbankto a version that resolves this vulnerability.Fixed in 3.5.0-31.52 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-31-powerpc64-smpto a version that resolves this vulnerability.Fixed in 3.5.0-31.52 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-31-omapto a version that resolves this vulnerability.Fixed in 3.5.0-31.52
Event History
Frequently Asked Questions
What is the severity of USN-1835-1?
The severity of USN-1835-1 is critical due to the potential for denial of service and privilege escalation.
How do I fix USN-1835-1?
To fix USN-1835-1, upgrade to version 3.5.0-31.52 of the affected packages on Ubuntu 12.10.
What systems are affected by USN-1835-1?
USN-1835-1 affects Ubuntu 12.10 systems running specific versions of the Broadcom tg3 ethernet driver.
What is the cause of the USN-1835-1 vulnerability?
The vulnerability in USN-1835-1 is caused by a buffer overflow in the Broadcom tg3 ethernet driver.
Can USN-1835-1 be exploited remotely?
USN-1835-1 is a local vulnerability, meaning it cannot be exploited remotely and requires local user access to the system.